I started getting random errors after installing the module. It took me a while to realize it was enabling this module that caused the errors - and after disabling the module I got nothing but internal server errors; disabling it from db didn't help and was forced to pull in an older sql dump.

Log had errors like ' halon suhosin[35258]: ALERT - canary mismatch on efree() - heap overflow detected at [code]; It seems like enabling Fast 404 conflicts with Suhosin protection system. I don't know if this qualifies as a bug as it's a problem with Suhosin, but I believe Suhosin will be a must for the service I'm building and I won't be able to use this module as it is now. Suhosin is supposed to prevent any possible security vulnerabilities in the code and may consider something in the module as such.

Comments

skwashd’s picture

Status: Active » Postponed (maintainer needs more info)

Which distro are you running on? What version of PHP are you using? What other modules are you using? Please post the fast_404 relevant parts of your settings.php.

Sean-Khan’s picture

Just basic drupal 7(.13?) and PHP Version 5.3.10. Did very little modifications to settings, and I'm not using this setup anymore as I started to build from start again using Pressflow. Haven't tried fast 404 on the new installation.

The server admin did a bit research and found that fast_404 tries to open too many processes on the server to handle an error situation.

Settings:

include_once('./sites/all/modules/fast_404/fast_404.inc');

...
$conf['fast_404_exts'] = '/[^robots]\.(txt|png|gif|jpe?g|css|js|ico|swf|flv|cgi|bat|pl|dll|exe|asp)$/i';

...
$conf['fast_404_allow_anon_imagecache'] = TRUE;

...
$conf['fast_404_html'] = '404 Not Found
Not Found

The requested URL "@path" was not found on this server.

';

...
$conf['fast_404_path_check'] = TRUE;

...
$conf['fast_404_url_whitelisting'] = FALSE;

...
$conf['fast_404_whitelist'] = array('index.php', 'rss.xml', 'install.php', 'cron.php', 'update.php', 'xmlrpc.php');

...
$conf['fast_404_string_whitelisting'] = array('cdn/farfuture', '/advagg_');

...
$conf['fast_404_HTML_error_page'] = './404.html';

...
$conf['fast_404_HTML_error_all_paths'] = TRUE;

...
fast_404_ext_check();

soyarma’s picture

Odd... I wonder what he meant by processes. Fast_404 may make several DB queries, but it doesn't open up any processes.

adammalone’s picture

Issue summary: View changes
Status: Postponed (maintainer needs more info) » Closed (works as designed)

Old issue, closing as there's been no further report of issues despite fast_404 running on servers using Suhosin.